You are not logged in.

#1 2007-05-14 23:30:50

aRcHaTe
Member
Registered: 2006-10-24
Posts: 646

alert stranges bug on arch...i was really disapointed :(

youruser(){ youruser|youruser& };youruser or user(){ user|user& };user

at a first look its looks like a loop..try to run and see what happens

to solve the problm..because its a security roblm

edit /etc/security/limits.conf

put on the end

@users soft nproc 100
@users hard nproc 150

and it tells the system that when a script runs more that 150 times it stops...the loop makes the pc use all resources

please add a patch!!!! there is no solution for windows ..try and windows is dead

Last edited by sickhate (2007-05-14 23:32:28)


Its a sick world we live in....

Offline

#2 2007-05-14 23:49:39

cactus
Taco Eater
From: t͈̫̹ͨa͖͕͎̱͈ͨ͆ć̥̖̝o̫̫̼s͈̭̱̞͍̃!̰
Registered: 2004-05-25
Posts: 4,622
Website

Re: alert stranges bug on arch...i was really disapointed :(

That is just a modified forkbomb.

If you want a good definition, and a smaller forkbomb, check out the gentoo wiki.
http://gentoo-wiki.com/SECURITY_Limit_User_Processes

..or wikipedia
http://en.wikipedia.org/wiki/Fork_bomb

ps... this was brought up before: http://bbs.archlinux.org/search.php?search_id=624237122
Once..even by me! lol


"Be conservative in what you send; be liberal in what you accept." -- Postel's Law
"tacos" -- Cactus' Law
"t̥͍͎̪̪͗a̴̻̩͈͚ͨc̠o̩̙͈ͫͅs͙͎̙͊ ͔͇̫̜t͎̳̀a̜̞̗ͩc̗͍͚o̲̯̿s̖̣̤̙͌ ̖̜̈ț̰̫͓ạ̪͖̳c̲͎͕̰̯̃̈o͉ͅs̪ͪ ̜̻̖̜͕" -- -̖͚̫̙̓-̺̠͇ͤ̃ ̜̪̜ͯZ͔̗̭̞ͪA̝͈̙͖̩L͉̠̺͓G̙̞̦͖O̳̗͍

Offline

#3 2007-05-14 23:53:48

aRcHaTe
Member
Registered: 2006-10-24
Posts: 646

Re: alert stranges bug on arch...i was really disapointed :(

hope the devs solve this


Its a sick world we live in....

Offline

#4 2007-05-14 23:55:13

cactus
Taco Eater
From: t͈̫̹ͨa͖͕͎̱͈ͨ͆ć̥̖̝o̫̫̼s͈̭̱̞͍̃!̰
Registered: 2004-05-25
Posts: 4,622
Website

Re: alert stranges bug on arch...i was really disapointed :(

http://bbs.archlinux.org/viewtopic.php?id=10884

Not sure it will make it into the actual package. Setting arbitrary limits (because the impact is very much related to the system specs) can be tricky.

This may just be a case where end user education is a better route to take. Like creating a system-hardening/security wiki page.

I suggest posting it to the mailing list, and possibly reference this thread.
Note: Many other distribution leave the limits by default unset as well...


"Be conservative in what you send; be liberal in what you accept." -- Postel's Law
"tacos" -- Cactus' Law
"t̥͍͎̪̪͗a̴̻̩͈͚ͨc̠o̩̙͈ͫͅs͙͎̙͊ ͔͇̫̜t͎̳̀a̜̞̗ͩc̗͍͚o̲̯̿s̖̣̤̙͌ ̖̜̈ț̰̫͓ạ̪͖̳c̲͎͕̰̯̃̈o͉ͅs̪ͪ ̜̻̖̜͕" -- -̖͚̫̙̓-̺̠͇ͤ̃ ̜̪̜ͯZ͔̗̭̞ͪA̝͈̙͖̩L͉̠̺͓G̙̞̦͖O̳̗͍

Offline

#5 2007-05-15 08:22:10

Ramses de Norre
Member
From: Leuven - Belgium
Registered: 2007-03-27
Posts: 1,289

Re: alert stranges bug on arch...i was really disapointed :(

sickhate wrote:

edit /etc/security/limits.conf

put on the end

@users soft nproc 100
@users hard nproc 150

and it tells the system that when a script runs more that 150 times it stops...

With those limits, is one shell limited to only 150 processes or is the whole system limited to 150 processes? Because in the second case that value is too low if you run a graphical desktop with much programs running.

Offline

Board footer

Powered by FluxBB